GobyVuls/CVE-2022-41544.md at a3d8b98922174799dbf254667344a5e8f64af974 - GobyVuls - 临风笛

admin/GobyVuls

0 Fork 0

mirror of https://github.com/gobysec/GobyVuls.git synced 2026-10-24 17:04:30 +00:00

Files

T

之乎者也 61e177be85 Create CVE-2022-41544.md

2023-04-13 15:45:23 +08:00

1.2 KiB

Raw Blame History

GetSimpleCMS theme-edit.php content Arbitrary code execution vulnerability (CVE-2022-41544)

Vulnerability	GetSimpleCMS theme-edit.php content Arbitrary code execution vulnerability (CVE-2022-41544)
Chinese name	GetSimpleCMS 内容管理系统 theme-edit.php 文件 content 参数任意代码执行漏洞（CVE-2022-41544）
CVSS core	9.8
FOFA Query (click to view the results directly)	(body="content=\"GetSimple" \|\| body="Powered by GetSimple")
Number of assets affected	2784
Description	GetSimple CMS is a content management system (CMS) written in the PHP language. GetSimple CMS v3.3.16 has a security vulnerability that stems from the discovery of the remote Code execution (RCE) vulnerability through the edited_file parameter in admin/theme-edit.php.
Impact	GetSimple CMS v3.3.16 has a security vulnerability that stems from the discovery of the remote Code execution (RCE) vulnerability through the edited_file parameter in admin/theme-edit.php.